...

Current state: Under Discussion

Discussion thread: here [Change the link from the KIP proposal email archive to your own email thread]

JIRA: here

Please keep the discussion on the mailing list rather than commenting on the wiki (wiki discussions get unwieldy fast).

...

• /connectors/<connector_name>
• /connectors/<connector_name>/config
• /connectors/<connector_name>tasks

There is no new interface.

Proposed Changes

Modification in orgin org.apache.kafka.connect.runtime.rest.resources.ConnectorsResource class. Adding a new method maskCredentials, and this method will be called in each of the above three endpoint before the routing method returns.

Compatibility, Deprecation, and Migration Plan

To be backwards compatible, a new kafka connect configuration property "password.masking" (type Boolean, default False) will be added. If the user want the password to be masked, they can set this to True.

• Existing users will no long get the actual password value from Kafka Connect REST endpoint. In stead, they will get a masked value (e.g. "*********").
• A new deployment of kafka connect is needed

Rejected Alternatives

None identified.